CVE-2010-0547
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1...
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
Exploit likelihood
What each source reports
NVD Score used 2.1
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
- Record
CVE-2010-0547- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
- Record
CVE-2010-0547- Updated
- 2026-11-02
EUVDEUVD-2010-0578No score
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
- Record
EUVD-2010-0578- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xppx-r8rj-fw45No score
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1...
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
- Record
GHSA-xppx-r8rj-fw45- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
- Record
CVE-2010-0547- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-0547No score
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
- Record
DEBIAN-CVE-2010-0547- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10069-1No score
ctdb-4.5.0-1.1 on GA media
These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10069-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10334-1No score
cifs-utils-6.5-1.5 on GA media
These are all security issues fixed in the cifs-utils-6.5-1.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10334-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:12 | before 2:3.4.5~dfsg-2 | 2:3.4.5~dfsg-2 |
sambaDebian:13 | before 2:3.4.5~dfsg-2 | 2:3.4.5~dfsg-2 |
sambaDebian:14 | before 2:3.4.5~dfsg-2 | 2:3.4.5~dfsg-2 |
sambaDebian:5.0 From an advisory covering 2 CVEs | before 2:3.2.5-4lenny9, plus listed versions 2:3.2.5-42:3.2.5-4lenny12:3.2.5-4lenny22:3.2.5-4lenny32:3.2.5-4lenny42:3.2.5-4lenny62:3.2.5-4lenny72:3.2.5-4lenny8 | 2:3.2.5-4lenny9 |
samba3xRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-winbind-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3xRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-clientRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-commonRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
Show 52 moreShow less
| Package | Affected | Fixed |
|---|---|---|
samba3x-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-docRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-domainjoin-guiRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-swatRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-winbindRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3xRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-clientRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-commonRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-docRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-domainjoin-guiRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-swatRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-winbindRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-winbind-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
sambaRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-clientRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-commonRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-swatRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
sambaRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-clientRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-commonRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-swatRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
sambaRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-clientRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-commonRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-swatRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
sambaRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-clientRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-commonRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-swatRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
libsmbclientRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
sambaRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-clientRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-commonRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-swatRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
libsmbclient-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
sambaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
libsmbclientRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
libsmbclient-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
sambaRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-clientRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-commonRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-swatRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
sambaopenSUSE:Tumbleweed From an advisory covering 56 CVEs | before 4.5.0-1.1 | 4.5.0-1.1 |
cifs-utilsopenSUSE:Tumbleweed From an advisory covering 9 CVEs | before 6.5-1.5 | 6.5-1.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0547 is a low vulnerability (CVSS 2.1) in Samba, published February 4, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 42nd percentile. Fixed in samba 2:3.4.5~dfsg-2.
References
vupen.com/english/advisories/2010/1062
secunia.com/advisories/39317
security.gentoo.org/glsa/glsa-201206-29.xml
securityfocus.com/bid/38326
git.samba.org?p=samba.git%3Ba=commit%3Bh=a065c177dfc8f968775593ba00dffafeebb2e054
mandriva.com/security/advisories?name=MDVSA-2010:090
Show 107 moreShow less
lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html
lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
nvd.nist.gov/vuln/detail/CVE-2010-0547
git.samba.org?p=samba.git;a=commit;h=a065c177dfc8f968775593ba00dffafeebb2e054
github.com/advisories/GHSA-xppx-r8rj-fw45
security-tracker.debian.org/tracker/CVE-2010-0547
access.redhat.com/errata/RHBA-2011:0054
bugzilla.redhat.com/show_bug.cgi?id=459842
bugzilla.redhat.com/show_bug.cgi?id=480405
bugzilla.redhat.com/show_bug.cgi?id=527997
bugzilla.redhat.com/show_bug.cgi?id=560239
bugzilla.redhat.com/show_bug.cgi?id=565774
bugzilla.redhat.com/show_bug.cgi?id=565915
bugzilla.redhat.com/show_bug.cgi?id=568778
bugzilla.redhat.com/show_bug.cgi?id=582756
bugzilla.redhat.com/show_bug.cgi?id=590610
bugzilla.redhat.com/show_bug.cgi?id=590766
bugzilla.redhat.com/show_bug.cgi?id=596886
bugzilla.redhat.com/show_bug.cgi?id=609578
bugzilla.redhat.com/show_bug.cgi?id=641379
bugzilla.redhat.com/show_bug.cgi?id=643041
bugzilla.redhat.com/show_bug.cgi?id=649708
bugzilla.redhat.com/show_bug.cgi?id=651722
security.access.redhat.com/data/csaf/v2/advisories/2011/rhba-2011_0054.json
access.redhat.com/security/cve/CVE-2010-0547
bugzilla.redhat.com/show_bug.cgi?id=562156
cve.org/CVERecord?id=CVE-2010-0547
access.redhat.com/security/cve/CVE-2010-0787
bugzilla.redhat.com/show_bug.cgi?id=577277
cve.org/CVERecord?id=CVE-2010-0787
nvd.nist.gov/vuln/detail/CVE-2010-0787
access.redhat.com/errata/RHSA-2011:1219
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=695925
bugzilla.redhat.com/show_bug.cgi?id=721348
bugzilla.redhat.com/show_bug.cgi?id=722537
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1219.json
access.redhat.com/security/cve/CVE-2011-1678
cve.org/CVERecord?id=CVE-2011-1678
nvd.nist.gov/vuln/detail/CVE-2011-1678
access.redhat.com/security/cve/CVE-2011-2522
cve.org/CVERecord?id=CVE-2011-2522
nvd.nist.gov/vuln/detail/CVE-2011-2522
access.redhat.com/security/cve/CVE-2011-2694
cve.org/CVERecord?id=CVE-2011-2694
nvd.nist.gov/vuln/detail/CVE-2011-2694
access.redhat.com/security/cve/CVE-2011-3585
bugzilla.redhat.com/show_bug.cgi?id=742907
cve.org/CVERecord?id=CVE-2011-3585
nvd.nist.gov/vuln/detail/CVE-2011-3585
suse.com/security/cve/CVE-2009-1886
suse.com/security/cve/CVE-2009-1888
suse.com/security/cve/CVE-2009-2813
suse.com/security/cve/CVE-2009-2906
suse.com/security/cve/CVE-2009-2948
suse.com/security/cve/CVE-2010-0547
suse.com/security/cve/CVE-2010-0728
suse.com/security/cve/CVE-2010-0787
suse.com/security/cve/CVE-2010-0926
suse.com/security/cve/CVE-2010-1635
suse.com/security/cve/CVE-2010-1642
suse.com/security/cve/CVE-2010-2063
suse.com/security/cve/CVE-2010-3069
suse.com/security/cve/CVE-2011-0719
suse.com/security/cve/CVE-2011-2522
suse.com/security/cve/CVE-2011-2694
suse.com/security/cve/CVE-2012-0817
suse.com/security/cve/CVE-2012-0870
suse.com/security/cve/CVE-2012-1182
suse.com/security/cve/CVE-2012-2111
suse.com/security/cve/CVE-2012-6150
suse.com/security/cve/CVE-2013-0172
suse.com/security/cve/CVE-2013-0213
suse.com/security/cve/CVE-2013-0214
suse.com/security/cve/CVE-2013-0454
suse.com/security/cve/CVE-2013-1863
suse.com/security/cve/CVE-2013-4124
suse.com/security/cve/CVE-2013-4408
suse.com/security/cve/CVE-2013-4475
suse.com/security/cve/CVE-2013-4476
suse.com/security/cve/CVE-2013-4496
suse.com/security/cve/CVE-2013-6442
suse.com/security/cve/CVE-2014-0178
suse.com/security/cve/CVE-2014-0239
suse.com/security/cve/CVE-2014-0244
suse.com/security/cve/CVE-2014-3493
suse.com/security/cve/CVE-2014-3560
suse.com/security/cve/CVE-2014-8143
suse.com/security/cve/CVE-2015-0240
suse.com/security/cve/CVE-2015-3223
suse.com/security/cve/CVE-2015-5252
suse.com/security/cve/CVE-2015-5296
suse.com/security/cve/CVE-2015-5299
suse.com/security/cve/CVE-2015-5330
suse.com/security/cve/CVE-2015-5370
suse.com/security/cve/CVE-2015-7560
suse.com/security/cve/CVE-2015-8467
suse.com/security/cve/CVE-2015-8543
suse.com/security/cve/CVE-2016-0771
suse.com/security/cve/CVE-2016-2110
suse.com/security/cve/CVE-2016-2111
suse.com/security/cve/CVE-2016-2112
suse.com/security/cve/CVE-2016-2113
suse.com/security/cve/CVE-2016-2115
suse.com/security/cve/CVE-2016-2118
suse.com/security/cve/CVE-2016-2119
suse.com/security/cve/CVE-2012-1586